@extends('layouts.app')
@section('title','Hosting operations')
@section('content')
<x-page-header eyebrow="PRODUCTION CONTROLS" title="Hosting operations" description="Environment readiness, domain ownership, offline licensing and release evidence for installation operators."/>
<div class="stat-grid"><div class="stat-card"><span>Release</span><strong>{{ config('production.release') }}</strong></div><div class="stat-card"><span>Deployment mode</span><strong>{{ config('production.mode') }}</strong></div><div class="stat-card"><span>Storage engine</span><strong>{{ $checks['innodb'] ? 'InnoDB verified' : 'Check required' }}</strong></div></div>
@if(app()->environment('local'))<section class="panel"><div class="panel-heading"><h2>Local setup</h2></div><div class="panel-body"><p>Your HRMS runs on this computer with the existing MySQL database. No custom domain, Cloudflare account or cloud deployment is required.</p><a class="button primary" href="{{ $base }}/dashboard">Open company dashboard</a></div></section>@endif
<details class="panel"><summary class="panel-heading">Optional production readiness checks</summary><div class="panel-body"><p>These checks show this environment's configuration and worker heartbeats. A local development setup does not establish a production release or independent security sign-off.</p><div class="role-grid">@foreach($checks as $key=>$ok)<p><span class="badge {{ $ok?'green':'amber' }}">{{ $ok?'Verified':'Needs configuration' }}</span> {{ ucwords(str_replace('_',' ',$key)) }}</p>@endforeach</div></div></details>
@can('branding.manage')@if(app(\App\Domain\Platform\Entitlements::class)->enabled('branding'))
<details class="panel"><summary class="panel-heading">Custom domains & HTTPS</summary><div class="panel-body"><p>Permanent fallback: @if(config('production.base_domain'))https://{{ app(\App\Domain\Identity\TenantContext::class)->tenant()->slug }}.{{ config('production.base_domain') }}@else Configure PLATFORM_BASE_DOMAIN in the server environment.@endif</p><p>A customer CNAME alone does not provide HTTPS. Publish ownership TXT and CNAME records, verify DNS, then activate after the TLS adapter serves a valid certificate and application proof. Use the fallback host while DNS/TLS is pending.</p><form method="post" action="{{ $base }}/deployment/domains" class="form-grid">@csrf<x-lifecycle-field name="hostname" label="Customer hostname"/><button class="button primary">Register customer domain</button></form>
@php($uitenantdomains=\App\Support\ListView::rows($domains,'tenant_domains'))<x-list-tools :items="$uitenantdomains" name="tenant_domains"/>@foreach($uitenantdomains as $d)<article class="renewal-card"><h3>{{ $d->hostname }} · {{ $d->status }}</h3><p>TXT: <code>_zentrik-challenge.{{ $d->hostname }}</code> → <code>zentrik={{ $d->proof }}</code></p><p>CNAME: <code>{{ $d->hostname }}</code> → <code>{{ config('production.domain_target') }}</code></p><div class="form-actions">@foreach(['verify'=>'Verify DNS ownership','activate'=>'Check HTTPS & activate','disable'=>'Disable hostname'] as $action=>$label)<form method="post" action="{{ $base }}/deployment/domains/{{ $d->id }}/{{ $action }}">@csrf<button class="button secondary">{{ $label }}</button></form>@endforeach</div></article>@endforeach<x-list-pagination :items="$uitenantdomains"/></div></details>
@endif @endcan
@can('deployment.manage')<details class="panel"><summary class="panel-heading">Signed offline licence</summary><div class="panel-body"><p>Installation ID: {{ config('production.installation_id') ?? 'Configure INSTALLATION_ID for an offline deployment.' }} · Bound company: {{ config('production.tenant_slug') ?? 'Configure DEPLOYMENT_TENANT_SLUG.' }}</p><p>Runtime uses only an externally configured public trust-key file. The issuer's private signing key must remain outside the application. Signature, installation, company, dates, module/user caps and increasing sequence are verified. Expired licences preserve data; use this screen on the platform URL to install renewal.</p>@if($licence)<p>Installed sequence {{ $licence->sequence }} · Expires {{ gmdate('Y-m-d H:i:s',$licence->claims['expires_at']) }} UTC</p>@endif<form method="post" action="{{ $base }}/deployment/licence">@csrf<x-lifecycle-field name="bundle" label="Signed licence JSON bundle" type="textarea"/><button class="button primary">Install signed licence</button></form></div></details>
<details class="panel"><summary class="panel-heading">Release evidence & independent review</summary><form method="post" action="{{ $base }}/deployment/reviews" class="panel-body form-grid">@csrf<x-lifecycle-field name="release" label="Release version" :value="config('production.release')"/><x-lifecycle-field name="kind" label="Evidence category" type="select" :options="['uat'=>'User acceptance','security'=>'Security review','load'=>'Load test','restore'=>'Restore drill','upgrade'=>'Upgrade / rollback rehearsal']"/><x-lifecycle-field name="evidence" label="Evidence, environment and results" type="textarea"/><button class="button primary">Submit release evidence</button></form></details>
<section class="panel"><div class="panel-heading"><h2>Release review register</h2></div><div class="panel-body">@php($uireleasereviews=\App\Support\ListView::rows($reviews,'release_reviews'))<x-list-tools :items="$uireleasereviews" name="release_reviews"/>@forelse($uireleasereviews as $review)<article class="renewal-card"><h3>{{ $review->release }} · {{ $review->kind }} · {{ $review->status }}</h3><p>{{ $review->evidence }}</p>@if($review->status==='pending' && $review->submitted_by!==auth()->id())<form method="post" action="{{ $base }}/deployment/reviews/{{ $review->id }}" class="form-grid">@csrf<x-lifecycle-field name="status" label="Evidence decision" type="select" :options="['accepted'=>'Accept','rejected'=>'Reject']"/><x-lifecycle-field name="decision_note" label="Independent review evidence" type="textarea"/><button class="button secondary">Record evidence decision</button></form>@else<p>{{ $review->decision_note }}</p>@endif</article>@empty<p>No company acceptance evidence has been recorded. Automated test results do not replace deployment-specific UAT or an independent penetration test.</p>@endforelse<x-list-pagination :items="$uireleasereviews"/></div></section>@endcan
@endsection